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1 . This action is responsive to the amendment filed on March 1 , 20 1 0. 

2. Claims 1-11, 13-17, 19-21 and 23-35 are presented for examination and claims 12, 18, 22 
and 36 are canceled. 

3. The text of those sections of Title 35, U.S. code not included in this office action can be 
found in a prior office action. 

Claim Rejections - 35 USC § 103 



4. Claims 1, 3-5, 7-10, 13-15, 17, 28 and 30-35 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Lalonde et al, US Patent Application Publication 2004/0068542 (hereinafter 
Lalonde), and Kirsch, US Patent 7,206,814 (hereinafter Kirsch) in view of Wang, US Patent 
Application Publication 2008/0040439 (hereinafter Wang). 

5. As per claims 1 and 35, Lalonde teaches the invention substantially as claimed, 
comprising: executing instructions stored in a computer readable storage medium to determine 
the domain from which the message is purported to be sent (Fig. 6; [0040]); executing 
instructions stored in a computer readable storage medium to determine an IP address from the 
message, the IP address corresponding to a device which the message was relayed at some point 
in transmission of the message (Fig. 6; [0040]); executing instructions stored in a computer 
readable storage medium to associate the domain with the IP address (Fig. 6; [003 1] and [0040]); 
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and executing instructions stored in a computer readable storage medium to classify the message 
according to the domain and IP address ([0039] and [0040]). 

6. Lalonde does not specifically teach create an IP address and domain pair. Kirsch teaches 
executing instructions stored in a computer readable storage medium to associate the domain 
with the IP address to create an IP address and domain pair (col. 6, lines 10-40); executing 
instructions stored in a computer readable storage medium to classify the message according to 
the IP address and domain pair based on one or more classification variables associated with the 
IP address and domain pair(col. 8, lines 3 1-56); and executing instructions stored in a computer 
readable storage medium to assign a score to the IP address and domain pair, the score 
comprising a ratio of a first classification variable to a second classification variable (col. 12, 
lines 1-30; col. 11, lines 24-60). 

7. It would have been obvious to one having ordinary skill in the art at the time of the 
invention was made to combine the teachings of Lalonde and Kirsch because Kirsch' s teaching 
of IP address and domain pair would increase the security of Lalonde 's system by creating a 
more trustworthy identifier to indicate an actual sender of the message. 



8. Lalonde and Kirsch do not teach variable decaying with time. Wang teaches the one or 
more classification variables decaying with time ([0046], [0047] and claims 5 and 22). 
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9. It would have been obvious to one having ordinary skill in the art at the time of the 
invention was made to combine the teachings of Lalonde, Kirsch and Wang because Wang's 
teaching of variables decaying with time would increase the security of their system by allowing 
their system to determine whether to accept or reject messages on the basis of the classification 
of the sender. 

10. As per claim 3, Lalonde, Kirsch and Wang teach the invention substantially as claimed in 
claim 1 above. Kirsch further teach comparing the IP address and domain pair with a related IP 
address and domain pair (col. 8, lines 1 1-35; col. 9, lines 26-28). 

11. As per claim 4, Lalonde, Kirsch and Wang teach the invention substantially as claimed in 
claim 1 above. Lalonde further teach wherein classifying includes checking classifications of 
other messages associated with the same domain (i.e., checking the blacklist) ([0042]) and 
different IP addresses ([0039]). 

12. As per claim 5 Lalonde, Kirsch and Wang teach the invention substantially as claimed in 
claim 1 above. Lalonde further teach wherein a plurality of IP addresses is associated with the 
domain ([0039]). 

13. As per claim 7, Lalonde, Kirsch and Wang teach the invention substantially as claimed in 
claim 1 above. Kirsch further teaches wherein the IP address is a boundary IP address (col. 7, 
line 30). 
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14. As per claim 8, Lalonde, Kirsch and Wang teach the invention substantially as claimed in 
claim 1 above. Lalonde further teach wherein the IP address is preconfigured ([0039]). 

15. As per claims 9 and 13, Lalonde, Kirsch and Wang teach the invention substantially as 
claimed in claim 1 above. Although Lalonde teaches wherein the IP address is preconfigured 
([0039]), however, Lalonde, Kirsch and Wang do not specifically teaches including wherein the 
IP address is preconfigured to be one hop from a gateway IP address. It would have been 
obvious to one having ordinary skill in the art at the time of the invention was made to include IP 
address preconfigured to be one hop or any hop from a gateway IP address because by doing so 
it would increase the user control by allowing configuration according to the user's design 
choice. 

16. As per claim 10, Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Lalonde further teach wherein the IP address is learned ([0039]) (learned from 
the DNS). 

17. As per claim 14, Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Kirsch further teach wherein determining the domain from which the message 
is purported to be sent includes identifying the stated sender domain associated with the message 
(col. 7, lines 55-64). 
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18. As per claim 15, Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Kirsch further teaches wherein the domain is a domain associated with a 
boundary IP address (col. 7, lines 30, 49-54). 

19. As per claim 17, Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Lalonde and Kirsch further teach wherein classifying includes forming a score 
based on previous classifications made to the IP address and domain pair (see Lalonde, [0038] 
and see Kirsch, col. 12, lines 1-30). 

20. As per claim 28, Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Kirsch further teaches providing a classification based on the IP address and 
domain pair as input to another classifier (col. 8, lines 17-62). 

21 . As per claim 30, Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Lalonde further teach wherein classifying includes classifying the message 
based on the IP address ([0039]). 

22. As per claim 3 1 , Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Lalonde further teach wherein classifying includes classifying the message 
based on the domain ([0038). 
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23. As per claim 32, Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Lalonde further teach wherein classifying includes classifying the message 
based on the domain and determining that the message was forged ([0038]). 

24. As per claim 33, Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Lalonde and Kirsch further teach wherein classifying includes determining a 
score for the IP address (see Lalonde, [0038]; see Kirsch, col. 12, lines 1-30). 

25. As per claim 34, Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Lalonde and Kirsch further teach wherein classifying includes determining a 
score for the domain (see Lalonde, [0038]; see Kirsch, col. 12, lines 1-30). 

26. Claims 2, 6, 1 1, 16, 19-21 and 23-27 rejected under 35 U.S.C. 103(a) as being 
unpatentable over Lalonde, Kirsch and Wang as applied to claim 1 above, and further in view of 
Murray et al, U.S. Patent 7,366761 (hereinafter Murray). 

27. As per claim 2, Lalonde, Kirsch and Wang teach the invention substantially as claimed in 
claim 1 above. Lalonde, Kirsch and Wang do not teach overriding a white list. Murray teaches 
executing instructions stored in a computer readable storage medium to override a white list 
based on the classification (col. 18, lines 38-40). 
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28. It would have been obvious to one having ordinary skill in the art at the time of the 
invention was made to combine the teachings of Lalonde, Kirsch, Wang and Murray because 
Murray's teaching of overriding a white list based on the classification would increase the 
effectiveness of their system by filtering unwanted e-mails based on sender information. 

29. As per claim 6, Lalonde, Kirsch and Wang teach the invention substantially as claimed in 
claim 1 above. Lalonde, Kirsch and Wang do not teach the IP address is associated with the 
domain. Murray teaches wherein the IP address is associated with the domain (col. 7, line 65- 
col. 8, line 4). 

30. It would have been obvious to one having ordinary skill in the art at the time of the 
invention was made to combine the teachings of Lalonde, Kirsch, Wang and Murray because 
Murray's teaching of the IP address is associated with the domain would increase the 
effectiveness of their system by allowing identification of the IP address is associated with the 
domain in order to filter unwanted e-mails based on sender information. 

31. As per claim 1 1 , Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Lalonde, Kirsch and Wang do not teach including the IP address is adaptively 
determined. Murray teaches wherein the IP address is adaptively determined (col. 3, lines 25-27). 

32. It would have been obvious to one having ordinary skill in the art at the time of the 
invention was made to combine the teachings of Lalonde, Kirsch, Want and Murray because 
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Murray's teaching of the IP address is adaptively determined would increase the effectiveness of 
their system by allowing determination of the IP address in order to filter unwanted e-mails 
based on sender information. 

33. As per claim 16, Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Lalonde, Kirsch and Wang do not teach consulting a white list. Murray 
teaches wherein classifying includes consulting a white list (col. 4, line 66-col. 5, line 6). 

34. It would have been obvious to one having ordinary skill in the art at the time of the 
invention was made to combine the teachings of Lalonde, Kirsch, Wang and Murray because 
Murray's teaching of consulting a white list would increase the effectiveness of their system by 
allowing identification of the e-mails in order to classify wanted or unwanted e-mails based on 
sender information. 

35. As per claim 19, Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Lalonde, Kirsch and Wang do not teach determining a spam ratio. Murray 
teaches determining a spam ratio (col. 9, lines 8-13). 

36. It would have been obvious to one having ordinary skill in the art at the time of the 
invention was made to combine the teachings of Lalonde, Kirsch, Wang and Murray because 
Murray's teaching of determining a spam ratio would increase the effectiveness of their system 
by allowing identification of unwanted e-mails based on spam ratio. 
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37. As per claim 20, Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Lalonde, Kirsch and Wang do not specifically teach a spam rate. Murray 
teaches determining a spam rate (col. 10, lines 53-65). 

38. It would have been obvious to one having ordinary skill in the art at the time of the 
invention was made to combine the teachings of Lalonde, Kirsch, Wang and Murray because 
Murray's teaching of determining a spam rate would increase the effectiveness of their system by 
allowing identification of unwanted e-mails based on spam rate. 

39. As per claim 2 1 , Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Lalonde, Kirsch and Wang do not specifically teach a spam rate. Murray 
teaches determining an estimated instantaneous spam rate (col. 10, lines 53-65; col. 11, lines 24- 
27). 

40. It would have been obvious to one having ordinary skill in the art at the time of the 
invention was made to combine the teachings of Lalonde, Kirsch, Wang and Murray because 
Murray's teaching of determining a spam rate would increase the effectiveness of their system by 
allowing identification of unwanted e-mails based on spam rate. 

41 . As per claim 23, Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Lalonde, Kirsch and Wang do not teach giving a classification weight relative 
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to another classification. Murray teaches wherein classifying includes giving a classification 
variable greater weight relative to another classification variable (col. 9, lines 20-31). 

42. It would have been obvious to one having ordinary skill in the art at the time of the 
invention was made to combine the teachings of Lalonde, Kirsch, Wang and Murray because 
Murray's teaching of giving a classification greater weight relative to another classification 
would increase the effectiveness of their system by allowing unwanted e-mails to be accurately 
identified based on sender's reputation. 

43. As per claim 24, Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Lalonde, Kirsch and Wang do not teach giving a classification weight relative 
to a computer classification. Murray teaches wherein classifying includes giving a classification 
variable associated with user greater weight relative to a classification variable associated with 
computer classification (col. 8, lines 44-50; col. 9, lines 20-31). 

44. It would have been obvious to one having ordinary skill in the art at the time of the 
invention was made to combine the teachings of Lalonde, Kirsch, Wang and Murray because 
Murray's teaching of giving a classification greater weight relative to a computer classification 
would increase the effectiveness of their system by allowing unwanted e-mails to be accurately 
identified based on complied sender's reputation. 
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45. As per claim 25, Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Lalonde, Kirsch and Wang do not teach giving weight of a good classification. 
Murray teaches wherein classifying includes giving an indeterminate classification a fraction of 
the weight of a good classification (col. 9, lines 20-31). 

46. It would have been obvious to one having ordinary skill in the art at the time of the 
invention was made to combine the teachings of Lalonde, Kirsch, Wang and Murray because 
Murray's teaching of giving weight to a good classification would increase the effectiveness of 
their system by allowing unwanted c-mails to be accurately identified based on sender's good 
reputation. 

47. As per claims 26 and 27, Lalonde, Kirsch and Wang teach the invention substantially as 
claimed in claim 1 above. Lalonde, Kirsch and Wang do not specifically teach consulting a table 
indexed by IP address and domain. Murray teaches wherein classifying includes consulting a 
table indexed by IP address and domain wherein each cell includes information about previous 
classifications (col. 9, lines 32-40). 

48. It would have been obvious to one having ordinary skill in the art at the time of the 
invention was made to combine the teachings of Lalonde, Kirsch, Wang and Murray because 
Murray's teaching of consulting a table of IP address and domain would increase the 
effectiveness of their system by allowing unwanted e-mails to be accurately identified based on 
sender's information. 
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49. Claim 29 is rejected under 35 U.S.C. 103(a) as being unpatentable over Lalonde, Kirsch 
and Wang as applied to claim 1 above, and further in view of Appleman, U.S. Patent Application 
Publication 2005/0076240 (hereinafter Appleman). 

50. As per claim 29, Lalonde, Kirsch and Wang teach the invention substantially as claimed 
in claim 1 above. Although Lalonde teaches providing the IP address and domain classification 
as input ([0038] and [0039]), however, Lalonde, Kirsch and Wang do not specifically teach a 
Bayesian classifier. Appleman teach providing classification based on the IP address and 
domain as input to a Bayesian classifier ([0058]). 

51. It would have been obvious to one having ordinary skill in the art at the time of the 
invention was made to combine the teachings of Lalonde, Kirsch, Wang and Appleman because 
Appleman' s teaching of providing the IP address and domain classification as input to a 
Bayesian classifier would increase the effectiveness of their system by allowing unwanted e- 
mails to be accurately identified based on sender's information. 

52. Applicant's arguments filed on 3/1/10 with respect to claims 1-11, 13-17, 19-21 and 23- 
35 have been considered but they are not persuasive. 



53. 



In the remarks, applicant argued that: 
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(1) The prior arts of record fail to teach executing instructions stored 
in a computer readable storage medium to classify the message according 
to the IP address and domain pair based on one or more classification 
variables associated with the IP address and domain pair. 

54. In response to point (1), applicant's argument has been considered and addressed to in the 
office action mailed on 10/13/09. 

55. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). A shortened statutory period for reply to this final action 
is set to expire THREE MONTHS from the mailing date of this action. In the event a first reply 
is filed within TWO MONTHS of the mailing date of this final action and the advisory action is 
not mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of the 
advisory action. In no event, however, will the statutory period for reply expire later than SIX 
MONTHS from the mailing date of this final action. Any inquiry concerning this 
communication or earlier communications from the examiner should be directed to Philip C Lee 
whose telephone number is (571)272-3967. The examiner can normally be reached on 8 AM TO 
5:30 PM Monday to Thursday and every other Friday. If attempts to reach the examiner by 
telephone are unsuccessful, the examiner's supervisor, Firmin Backer can be reached on (571) 
272-6703. The fax phone number for the organization where this application or proceeding is 
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assigned is 571-273-8300. Information regarding the status of an application may be obtained 
from the Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For more 
information about the PAIR system, see http ://pai r-di rect . u spto . gov . Should you have questions 
on access to the Private PAIR system, contact the Electronic Business Center (EBC) at 866-217- 
9197 (toll-free). 



/Philip C Lee/ 

Primary Examiner, Art Unit 2448 



